rvccmcnps02.raritanval.edu

- Raritan Valley Community College -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 34:f3:21:c5:02:f1:ab:22:0b:d4:d8:e8 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Raritan Valley Community College

Organization: Raritan Valley Community College
State / Province: New Jersey
Locality: Branchburg
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 34:f3:21:c5:02:f1:ab:22:0b:d4:d8:e8
Serial Number (int): 16387148957190954502394796264
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: a5:f0:ab:09:83:b7:44:34:a3:e4:59:c7:86:63:50:6b:33:d6:55:5b
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 97:ad:9d:f5:45:95:d9:aa:09:ed:29:90:a8:fb:57:4f:6e:5a:70:b5
Fingerprint (sha256): 75:b8:ca:a4:6e:a8:6f:2f:b7:86:db:6c:12:a5:e0:ba:b6:00:9a:fe:19:84:f9:fe:cf:19:56:74:b2:85:b0:a5

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate rvccmcnps02.raritanval.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rvccmcnps02.raritanval.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rvccmcnps02.raritanval.edu

Other certificates including the domain name raritanval.edu

(limited to 100 certificates)
ezp.raritanval.edu
WWW.RARITANVAL.EDU
rvccmcnps01.academic.raritanval.edu
*.raritanval.edu
lionsden.raritanval.edu
library.raritanval.edu
ssbprod.raritanval.edu
vpn.raritanval.edu
helpdesk.raritanval.edu
library.raritanval.edu
*.raritanval.edu
commons.raritanval.edu
mail.raritanval.edu
ssobanprod.raritanval.edu
*.raritanval.edu
lionsden.raritanval.edu
library.raritanval.edu
*.raritanval.edu
paymentprod.raritanval.edu
selfservtest.raritanval.edu
helpdesk.raritanval.edu
www2.raritanval.edu
library.raritanval.edu
lionsden.raritanval.edu
ezp.raritanval.edu
transcript.raritanval.edu
RVCCAPPS.RARITANVAL.EDU
www.raritanval.edu
*.raritanval.edu
ezp.raritanval.edu
rvccmcnps01.academic.raritanval.edu
public.raritanval.edu
library.raritanval.edu
degreeworks.raritanval.edu
www2.raritanval.edu
orientation.raritanval.edu
rvccmcpbadm.raritanval.edu
rvccmcnps01.academic.raritanval.edu
*.raritanval.edu
lumserve.raritanval.edu
vpn.raritanval.edu
banweb.raritanval.edu
*.raritanval.edu
lumserve.raritanval.edu
ezp.raritanval.edu
*.raritanval.edu
banweb.raritanval.edu
*.raritanval.edu
vpn.raritanval.edu
public.raritanval.edu
helpen.alvarum.com
library.raritanval.edu
*.raritanval.edu
ssobanprod.raritanval.edu
rvcctstssb.raritanval.edu
cmp.raritanval.edu
ssbprod.raritanval.edu
library.raritanval.edu
ssobanprod.raritanval.edu
*.raritanval.edu
lumserve.raritanval.edu
*.raritanval.edu
Commons.raritanval.edu
commons.raritanval.edu
www.raritanval.edu
rvccmcnps02.raritanval.edu
www.raritanval.edu
www2.raritanval.edu
public.raritanval.edu
iapprvcc.raritanval.edu
ezp.raritanval.edu
library.raritanval.edu
*.raritanval.edu
helpdesk.raritanval.edu
ssbprod.raritanval.edu
banweb.raritanval.edu
lumserve.raritanval.edu
sso.raritanval.edu
luminis.raritanval.edu
iapprvcc.raritanval.edu
rvccmcnps02.raritanval.edu
*.raritanval.edu
ssbprod.raritanval.edu
library.raritanval.edu
www.raritanval.edu
desk.rocket.chat
commons.raritanval.edu
*.raritanval.edu
www.raritanval.edu
mycampus.raritanval.edu
lumserve.raritanval.edu
WWW.RARITANVAL.EDU
library.raritanval.edu
*.raritanval.edu
ezp.raritanval.edu
vpn.raritanval.edu
ezp.raritanval.edu
ssbprod.raritanval.edu
ssbprod.raritanval.edu
public.raritanval.edu

Certificate

The complete raw certificate details for rvccmcnps02.raritanval.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23F6xF8pGjBZtsUNqqof
+qAyoBcyHT1H7rFUJi0JqPaUDicvHApdzGGKQ9sc5tzChqEHCp4e6xWIPvDXi5f+
bcK55FdT9rx4T+De0xatbHE+xCQ3FAIWVHvQAMkWVs3zprM0PXWM8YOLLH6uD/6U
tkcm+iA2fitErlXDsNsSP9qj+owoUWxFwuPiFFK45xzypPbxhb7bM5hKxK7/3O38
9+z5Guo3sOX1gesyPlpfDA5cjGzLn98Ux7IQWytfzRWAkaf/PH+05Cys4O01rdZ2
L0r4189QUxlMz0VA+suJXFyU5zELoSOhXQx6ICZNZyW9CWMVjpUL2ZnV96vVqWOH
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16387148957190954502394796264
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-04 13:51:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-06 18:01:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Branchburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Raritan Valley Community College'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rvccmcnps02.raritanval.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27702147643672927459796290002349702668538497222719609216092058385798645447534637881813032660012922030104763223848713632511758273134792827656895322810876656658419057961472422407106087744465781459663256123869971036074691146229887693880677502819966898767684498236856770775835811192323442391421132277727005723319054519004049338069541761245615557925087099295329885758360255738219536297360496558873881515754715875045615560941726387442056284755425231934486181963501793074174766065245733520744020723219588229820525751842533836608324829359593779280043383447131136407361265139544203182216977636700597999893420262131363773384697
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rvccmcnps02.raritanval.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a5f0ab0983b74434a3e459c78663506b33d6555b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00bbdeebad74422c001944c283c989814cd39351d43b566ac726f95202415d80a69f172f213061acae7cc87df3801f8e36bc164e2faabe79bdd5fc7e0f26f035e72896a04a3498e613455654078e59c40439be362e3ab4d69c12a5a03a679f5d8a4829ce42241f65e5818d4f60627f1d07c84f9562ad29a2cfc64e91571354057d17fda3fc799efae44865d778c79aecb763728a1161f0d947f2ad68b71c6d9fdbb667f0777bc914d244cbd95bfac856797542437cb3f7100afc652eeaad05d98fa968c1fe7d03a9a9eda2b5f1e919bcc2425756723af113507bf4043936000106f5fb39c44a64de186d1315f36337fc0e0b21e3491f9f4e03ee914a927478a512